Show filters
14 Total Results
Displaying 11-14 of 14
Sort by:
Attacker Value
Unknown
CVE-2012-1123
Disclosure Date: June 29, 2012 (last updated October 04, 2023)
The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password.
0
Attacker Value
Unknown
CVE-2012-1120
Disclosure Date: June 29, 2012 (last updated October 04, 2023)
The SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote_allow_user_edit_delete and delete_bug_threshold permissions, which allows remote authenticated users with read and write SOAP API privileges to delete arbitrary bug reports and bug notes.
0
Attacker Value
Unknown
CVE-2012-1121
Disclosure Date: June 29, 2012 (last updated October 04, 2023)
MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify or (2) delete global categories.
0
Attacker Value
Unknown
CVE-2012-2691
Disclosure Date: June 17, 2012 (last updated October 04, 2023)
The mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request.
0
